Microsoft SC-900 Online Practice Questions and Exam Preparation

Microsoft SC-900 Online Questions & Answers

• Question 81:

  You have an Azure subscription.

  You need to implement approval-based, time-bound role activation.

  What should you use?

  A. Microsoft Entra Access Reviews
  B. Microsoft Entra Privileged Identity Management (PIM)
  C. Microsoft Entra Identity Protection
  D. Microsoft Entra Conditional access
  B. Microsoft Entra Privileged Identity Management (PIM)

  ---

  Explanation

  1. Microsoft Entra Privileged Identity Management (PIM) Incorrect:

  2. Microsoft Entra Access Reviews

  3. Microsoft Entra Conditional access

  4. Microsoft Entra ID Protection

  5. Microsoft Entra Identity Protection

  6. Windows Hello for Business Microsoft Entra Privileged Identity Management (PIM) is designed specifically for implementing approval-based, time-bound role activation in an Azure subscription. PIM allows you to manage and control access to privileged roles in Microsoft Entra ID, Azure resources, and Microsoft Entra-integrated SaaS apps. It enables you to elevate access on a just-in-time basis and provides an approval workflow for role activation, which can be restricted to specific time periods.

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configureReference:

• Question 82:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 83:

  What is an example of encryption at rest?

  A. encrypting communications by using a site-to-site VPN
  B. encrypting a virtual machine disk
  C. accessing a website by using an encrypted HTTPS connection
  D. sending an encrypted email
  B. encrypting a virtual machine disk

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

• Question 84:

  Each product group at your company must show a distinct product logo in encrypted emails instead of the standard Microsoft Office 365 logo.

  What should you do to create the branding templates?

  A. Create a Transport rule.
  B. Create an RMS template.
  C. Run the Set-IRMConfiguration cmdlet.
  D. Run the New-OMEConfiguration cmdlet.
  D. Run the New-OMEConfiguration cmdlet.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/add-your-organization-brand-to-encrypted-messages?view=o365-worldwide

• Question 85:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/security/fundamentals/customer-lockbox-overview

• Question 86:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  Box 2: Yes

  Box 3: No

  The Zero Trust model does not assume that everything behind the corporate firewall is safe, the Zero Trust model assumes breach and verifies each request as though it originated from an uncontrolled network.

  References:

  https://docs.microsoft.com/en-us/security/zero-trust/

• Question 87:

  You have a Microsoft 365 E3 subscription.

  You plan to audit user activity by using the unified audit log and Basic Audit.

  For how long will the audit records be retained?

  A. 15 days
  B. 30 days
  C. 90 days
  D. 180 days
  C. 90 days

• Question 88:

  Which Microsoft portal provides information about how Microsoft manages privacy, compliance, and security?

  A. Microsoft Service Trust Portal
  B. Compliance Manager
  C. Microsoft 365 compliance center
  D. Microsoft Support
  A. Microsoft Service Trust Portal

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

• Question 89:

  HOTSPOT

  You have a Microsoft SharePoint Online site named Site1 and a sensitivity label named Sensitivity1.

  Sensitivity1 adds a watermark and a header to content.

  You create a policy to automatically apply Sensitivity1 to emails in Microsoft Exchange Online and Site1. How will Sensitivity1 mark matching emails and Site1 documents?

  To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 90:

  HOTSPOT

  Select the answer that correctly completes the sentence.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults